Harnig manual removal:
Kill processes:
desktop.exe, dial32.exe, dkdial.exe, kl.exe, mstasks1.exe, mstasks2.exe, paytime.exe, seksdialer.exe, system.exe, tool[X].exe, toolbar.exe, wintime.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wintime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoadSystem={0A323FA1-38DE-44EC-B2FA-4002183C143E}
HKEY_CLASSES_ROOT\CLSID\{0A323FA1-38DE-44EC-B2FA-4002183C143E}
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\MinLevel=Code Download
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Safety Warning Level=SucceedSilent
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Security_RunActiveXControls=0x01000000
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Security_RunScripts=0x01000000
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Trust Warning Level=No Security
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\MinLevel=Code Download
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Safety Warning Level=SucceedSilent
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Security_RunActiveXControls=0x01000000
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Security_RunScripts=0x01000000
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Trust Warning Level=No Security
Unregister DLLs:system32.dll
Delete files:desktop.exe, dial32.exe, dkdial.exe, kl.exe, mstasks1.exe, mstasks2.exe, paytime.exe, seksdialer.exe, system.exe, tool[X].exe, toolbar.exe, wintime.exe, system32.dll
Misc:[X] is a digit from 1 to 5.
Exact file location:
dial32.exe, dkdial.exe, wintime.exe, system32.dll - C:\Windows\System32 or C:\Winnt\System32
desktop.exe, kl.exe, mstasks1.exe, mstasks2.exe, paytime.exe, seksdialer.exe, system.exe, tool[X].exe, toolbar.exe - C:\Windows or C:\Winnt
Post Comment: